- Home
- Software Composition Analysis Software
- ComplyVigilance SCA
ComplyVigilance SCA
What it is
ComplyVigilance SCA analyzes software dependencies, manages vulnerabilities and automates compliance across the development lifecycle. It checks dependencies across more than 10 languages and ecosystems for vulnerabilities and license compliance, and examines container base images and application layers for vulnerabilities and component details. The product generates SBOMs in CycloneDX 1.5+, SPDX 2.3 and VEX formats, and can import external SBOMs. Users can work through a CLI, desktop app or web portal. The maker describes an AI-powered knowledge base with real-time CVE updates and more than one million vulnerability records. The Free plan offers full-scope dependency analysis and deep transitive coverage through SaaS-only access. Foundation costs €120 per contributor per year; Professional costs €200 per contributor per year. Enterprise pricing is on request and includes on-premises or hybrid deployment, dedicated dashboards, and API and SIEM integrations. The maker identifies engineering, security, product security, legal, procurement and compliance teams as audiences.
For and against
For
- Analyzes dependencies across 10+ languages and ecosystems.
- Generates and imports SBOMs in listed formats.
- Scans container base images and application layers.
- Provides CLI, desktop app, and web portal.
- Free plan includes transitive dependency coverage.
Against
- Free access is SaaS-only.
- Foundation costs €120 per contributor per year.
- Professional costs €200 per contributor per year.
- Enterprise pricing is on request.
The verdict
ComplyVigilance SCA brings dependency, container and compliance workflows together with several interfaces and SBOM formats. Compare the per-contributor tiers and Enterprise deployment options with your requirements.
Who it suits
The product suits engineering and security teams that need dependency analysis, vulnerability management or compliance workflows, as well as legal, procurement and compliance stakeholders. The Free plan is limited to SaaS access.
Plans and prices
Free
Full Scope Dependency Analysis · Deep Transitive Dependency Coverage · SaaS-only access
Read 5 Oct 2026 · complyvigilance.com
Foundation
Per contributor · License management · Vulnerability scanning · CI/CD integrations
Read 5 Oct 2026 · complyvigilance.com
Professional
Per contributor · Container and signature scanning · License compliance automation · Limited Optimus AI workflows
Read 5 Oct 2026 · complyvigilance.com
Enterprise
Full Optimus AI · On-premises or hybrid deployment · Dedicated dashboards · API and SIEM integrations
Read 5 Oct 2026 · complyvigilance.com
On the record
- Availability limit
- The pricing page lists self-healing compliance database and advanced audit reporting as Enterprise features.complyvigilance.com · read 5 Oct 2026
- Compliance
- The maker says ComplyVigilance automates license monitoring, usage analysis, and compliance checks while detecting supply-chain vulnerabilities.complyvigilance.com · read 5 Oct 2026
- Container scanning
- Container scanning examines base images and application layers for vulnerabilities and component metadata.complyvigilance.com · read 5 Oct 2026
- Dependency analysis
- The product analyzes dependencies across 10+ languages and ecosystems, including vulnerability detection and license compliance.complyvigilance.com · read 5 Oct 2026
- Integrations
- CI/CD integrations are included in Foundation and higher tiers; API and SIEM integrations are listed for Enterprise.complyvigilance.com · read 5 Oct 2026
- Interfaces
- The product offers a CLI, a desktop app, and a web portal.complyvigilance.com · read 5 Oct 2026
- Product
- ComplyVigilance SCA provides software composition analysis, vulnerability management, and compliance automation across the software development lifecycle.complyvigilance.com · read 5 Oct 2026
- SBOM
- SBOM generation supports CycloneDX 1.5+, SPDX 2.3, and VEX formats, and the product also supports importing external SBOMs.complyvigilance.com · read 5 Oct 2026
- Security and hosting
- The maker describes the platform as EU-built and EU-hosted, and lists on-premises or hybrid deployment for Enterprise.complyvigilance.com · read 5 Oct 2026
- Security intelligence
- The maker describes an AI-powered knowledge base with real-time CVE updates, contextual metadata, and more than one million vulnerability records.complyvigilance.com · read 5 Oct 2026
- Support
- The maker lists support by email and phone and says it typically responds to inquiries within 24 hours on business days.complyvigilance.com · read 5 Oct 2026
- Who it serves
- The maker identifies enterprise engineering teams, security and product security functions, and legal, procurement, and compliance stakeholders as its audiences.complyvigilance.com · read 5 Oct 2026
